This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json) Hash identifier: womcGOsmc3UGh2zUjlFVVoCKQrUw7zVuRa/u/BrEEZQ= Subject key identifier: 49:99:28:83:D9:55:DA:34:02:1F:AA:34:67:6F:85:E3:F0:CC:B7:56 Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1 Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1 Certificate serial: 019B3DC774C1A71040000B82098B4F5C8F6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft Manifest number: 1063 Signing time: Sat 20 Dec 2025 22:00:40 +0000 Manifest this update: Sat 20 Dec 2025 22:00:40 +0000 Manifest next update: Sun 21 Dec 2025 22:00:40 +0000 Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=) 2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: yJLlmfepuFSwKirBkUTgny4zXhsHSz+hif9gxVxU+Y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:74:c1:a7:10:40:00:0b:82:09:8b:4f:5c:8f:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1 Validity Not Before: Dec 20 22:00:40 2025 GMT Not After : Dec 21 22:00:40 2025 GMT Subject: CN=49992883d955da34021faa34676f85e3f0ccb756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:61:c6:32:af:2a:14:3d:2b:14:69:5f:86:24: a1:cc:39:03:31:1a:5c:5e:59:82:9e:b1:61:49:45: d9:43:6e:4e:ce:95:f8:d2:d0:0b:95:fe:10:21:21: 74:80:75:dd:63:b8:28:86:5e:d8:30:93:2a:36:d0: ab:e0:58:88:2a:08:77:77:19:d7:2b:0f:79:17:fb: 7d:10:7c:54:9c:91:50:d1:bc:2c:10:69:46:52:fc: db:de:47:67:2a:f7:7d:f9:26:93:05:e3:99:c3:77: 25:ea:91:fd:e1:ac:ec:4e:86:b5:c5:62:05:07:c1: 00:ff:95:5d:a9:8d:d2:de:cc:a0:8a:b6:55:09:73: 4d:30:1e:12:0a:ec:97:af:0c:11:15:77:b6:e2:c6: 71:a4:54:d1:cd:a6:8c:33:f7:2b:b1:2b:1d:a6:7c: 0f:0c:fd:c4:b5:0d:38:6e:25:5d:f2:ac:a4:99:56: 32:99:1f:d0:1e:51:2d:e4:82:01:9e:ed:50:a9:bd: bc:78:9d:db:e8:b6:dc:c9:c1:80:a9:80:d9:0b:c9: 81:6e:e6:16:61:9e:d5:58:37:87:76:a7:36:bb:11: 97:7f:74:16:f7:9b:7e:7e:28:e1:db:53:cf:05:5b: 48:ef:3a:4c:39:0b:32:93:b5:1e:c2:d4:05:b6:6c: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:99:28:83:D9:55:DA:34:02:1F:AA:34:67:6F:85:E3:F0:CC:B7:56 X509v3 Authority Key Identifier: keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:eb:30:63:94:a8:83:7f:ab:af:3e:22:31:65:17:ca:8a:ff: 58:0d:df:88:41:67:4a:79:f1:4b:3b:31:ce:16:4e:51:2a:bd: e6:6f:33:ee:22:a6:4f:ae:dc:66:aa:12:1f:e3:61:d2:71:92: 76:f4:85:61:70:05:eb:fe:bb:04:63:91:3a:ca:cc:be:ee:e5: de:ca:ac:55:9c:d5:a3:ac:78:04:8a:e1:28:83:2e:65:d3:ca: e0:d7:a0:2b:9c:69:0d:52:1b:10:19:06:92:57:49:41:71:bc: 30:1f:69:01:f3:3d:24:28:07:b9:b4:bb:ea:af:7b:77:3a:80: 77:26:64:15:bd:75:b6:b7:a2:5e:7e:56:e7:b2:8e:e3:40:31: 47:5c:bb:87:9f:44:60:68:a1:d4:99:d6:5e:e4:ad:3d:dd:81: 27:ec:06:7c:27:3d:10:4c:96:c9:fa:87:56:70:d3:d9:bf:9d: 0b:3a:ed:07:e3:bf:7c:59:c3:60:a9:69:01:ae:d8:d4:06:9c: ed:87:d3:7e:48:be:1d:a8:83:8e:66:bf:6b:f3:d8:a0:76:3a: e8:7d:53:71:6a:66:94:78:13:14:02:d1:30:19:1b:4d:ee:9d: f4:20:0a:db:9e:f8:f5:cc:8c:ec:21:f3:93:fb:3d:63:dc:c8: 68:8b:18:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x3TBpxBAAAuCCYtPXI9uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNmM2NGZjMjBjZTFkOTcyZjVlMzQ3NDMxOTA0OGEyYWM2 NTZkZjEwHhcNMjUxMjIwMjIwMDQwWhcNMjUxMjIxMjIwMDQwWjAzMTEwLwYDVQQD Eyg0OTk5Mjg4M2Q5NTVkYTM0MDIxZmFhMzQ2NzZmODVlM2YwY2NiNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2HGMq8qFD0rFGlfhiShzDkDMRpc XlmCnrFhSUXZQ25OzpX40tALlf4QISF0gHXdY7gohl7YMJMqNtCr4FiIKgh3dxnX Kw95F/t9EHxUnJFQ0bwsEGlGUvzb3kdnKvd9+SaTBeOZw3cl6pH94azsToa1xWIF B8EA/5VdqY3S3sygirZVCXNNMB4SCuyXrwwRFXe24sZxpFTRzaaMM/crsSsdpnwP DP3EtQ04biVd8qykmVYymR/QHlEt5IIBnu1Qqb28eJ3b6LbcycGAqYDZC8mBbuYW YZ7VWDeHdqc2uxGXf3QW95t+fijh21PPBVtI7zpMOQsyk7UewtQFtmzAgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmZKIPZVdo0Ah+qNGdvhePwzLdWMB8GA1UdIwQY MBaAFF5sZPwgzh2XL140dDGQSKKsZW3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG14a19DRE9IWmN2WGpSME1aQklvcXhsYmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMDk3ODgtOTg2OS00ZjEyLTlmMWUt YWM0ZGUxNjlhZGNlLzEvWG14a19DRE9IWmN2WGpSME1aQklvcXhsYmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMDk3ODgtOTg2OS00ZjEyLTlmMWUtYWM0ZGUxNjlhZGNl LzEvWG14a19DRE9IWmN2WGpSME1aQklvcXhsYmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+swY5So g3+rrz4iMWUXyor/WA3fiEFnSnnxSzsxzhZOUSq95m8z7iKmT67cZqoSH+Nh0nGS dvSFYXAF6/67BGOROsrMvu7l3sqsVZzVo6x4BIrhKIMuZdPK4NegK5xpDVIbEBkG kldJQXG8MB9pAfM9JCgHubS76q97dzqAdyZkFb11treiXn5W57KO40AxR1y7h59E YGih1JnWXuStPd2BJ+wGfCc9EEyWyfqHVnDT2b+dCzrtB+O/fFnDYKlpAa7Y1Aac 7YfTfki+HaiDjma/a/PYoHY66H1TcWpmlHgTFALRMBkbTe6d9CAK25749cyM7CHz k/s9Y9zIaIsYEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:52:43 2025 by rpki-client